Qubes-Whonix Development / Qubes Integration

Patrick · February 17, 2022, 1:11pm

Comment by adrelanos to Announcement: Updating via direct commands no longer recommended

QubesOS:master ← QubesOS:update-commands

There's nothing wrong with qubes-dom0-update, apt or dnf per definition, right? … The only idea is that users who don't use qubesctl would miss out on some extra fixes applied by qubesctl? Due to https://github.com/QubesOS/qubes-issues/issues/6585 I'd suggest meanwhile to tell users: > Until https://github.com/QubesOS/qubes-issues/issues/6585 is fixed, two commands are required to update. > Use of qubes-dom0-update, apt or dnf is OK but by itself insufficient. > qubesctl should be run after running running qubes-dom0-update, apt or dnf. https://www.qubes-os.org/doc/how-to-update/ should be edited beforehand. What do you think?

Patrick · February 18, 2022, 5:21pm

github.com/QubesOS/updates-status

core-admin-addon-whonix v4.1.1 (r4.1)

opened 03:30AM - 18 Feb 22 UTC

closed 02:54PM - 16 Mar 22 UTC

qubesos-bot

r4.1-dom0-stable

Update of core-admin-addon-whonix to v4.1.1 for Qubes r4.1, see comments below f…or details. Built from: https://github.com/QubesOS/qubes-core-admin-addon-whonix/commit/6569ade6737d422690b2c15c2510b3bc2c5551b9 [Changes since previous version](https://github.com/QubesOS/qubes-core-admin-addon-whonix/compare/v4.0.2...v4.1.1): QubesOS/qubes-core-admin-addon-whonix@6569ade version 4.1.1 QubesOS/qubes-core-admin-addon-whonix@bb93a3e Merge remote-tracking branch 'origin/pr/14' QubesOS/qubes-core-admin-addon-whonix@0a74587 indent style fix QubesOS/qubes-core-admin-addon-whonix@7bbe355 restrict qrexec `whonix.GatewayCommand` QubesOS/qubes-core-admin-addon-whonix@9ea1779 remove hardcoded qrexec entries for better readability QubesOS/qubes-core-admin-addon-whonix@cbe60a1 refined qrexec policy error handling QubesOS/qubes-core-admin-addon-whonix@a7797aa allow empty argument only for `whonix.SdwdateStatus` qrexec call QubesOS/qubes-core-admin-addon-whonix@d238125 fixed shutdown of App Qube (`anon-whonix`) denied message QubesOS/qubes-core-admin-addon-whonix@d006367 version 4.1.0 QubesOS/qubes-core-admin-addon-whonix@887328e fix "Denied: whonix.SdwdateStatus" error message after DispVM has halted QubesOS/qubes-core-admin-addon-whonix@71ffd29 port to new policy format QubesOS/qubes-core-admin-addon-whonix@e96408c add `autostart=no` to qrexec policy QubesOS/qubes-core-admin-addon-whonix@97f242c spec: add BR make QubesOS/qubes-core-admin-addon-whonix@f5c3be1 gitlab-ci: move pylint earlier QubesOS/qubes-core-admin-addon-whonix@aa70328 Add .gitlab-ci.yml QubesOS/qubes-core-admin-addon-whonix@dbd239b Update travis QubesOS/qubes-core-admin-addon-whonix@fffefc6 travis: switch to bionic Referenced issues: QubesOS/qubes-issues#7169 QubesOS/qubes-issues#4613 QubesOS/qubes-issues#7013 QubesOS/qubes-issues#6982 If you're release manager, you can issue GPG-inline signed command: * `Upload core-admin-addon-whonix 6569ade6737d422690b2c15c2510b3bc2c5551b9 r4.1 current repo` (available 7 days from now) * `Upload core-admin-addon-whonix 6569ade6737d422690b2c15c2510b3bc2c5551b9 r4.1 current (dists) repo`, you can choose subset of distributions, like `vm-fc24 vm-fc25` (available 7 days from now) * `Upload core-admin-addon-whonix 6569ade6737d422690b2c15c2510b3bc2c5551b9 r4.1 security-testing repo` Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

Patrick · February 18, 2022, 5:22pm

github.com/QubesOS/updates-status

qubes-template-whonix-gw-16 4.0.6-202202171443 (r4.1)

opened 02:42PM - 17 Feb 22 UTC

closed 05:31PM - 25 Feb 22 UTC

qubesos-bot

r4.1-stable

Template whonix-gw-16 4.0.6-202202171443 for Qubes r4.1, see comments below for …details. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload linux-template-builder 4.0.6-202202171443 r4.1 templates-itl vm-whonix-gateway-16 repo` (available 7 days from now) * `Upload linux-template-builder 4.0.6-202202171443 r4.1 templates-community vm-whonix-gateway-16 repo` (available 7 days from now) Above commands will work only if package in testing repository isn't superseded by newer version.

github.com/QubesOS/updates-status

qubes-template-whonix-ws-16 4.0.6-202202171443 (r4.1)

opened 03:18PM - 17 Feb 22 UTC

closed 05:31PM - 25 Feb 22 UTC

qubesos-bot

r4.1-stable

Template whonix-ws-16 4.0.6-202202171443 for Qubes r4.1, see comments below for …details. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload linux-template-builder 4.0.6-202202171443 r4.1 templates-itl vm-whonix-workstation-16 repo` (available 7 days from now) * `Upload linux-template-builder 4.0.6-202202171443 r4.1 templates-community vm-whonix-workstation-16 repo` (available 7 days from now) Above commands will work only if package in testing repository isn't superseded by newer version.

Patrick · February 18, 2022, 6:15pm

github.com/QubesOS/qubes-issues

`qvm-template purge whonix-gw-16` results in `ERROR: The dummy qube does not provide network`

opened 06:14PM - 18 Feb 22 UTC

adrelanos

T: bug C: core P: default needs diagnosis

qvm-template purge whonix-gw-16 ``` This will completely remove the selected… VM(s)... whonix-gw-16 sys-whonix test-delete anon-whonix dom0-updatevm whonix-ws-16-dvm Are you sure? [y/N] Y This will completely remove the selected VM(s)... whonix-gw-16 sys-whonix test-delete anon-whonix dom0-updatevm whonix-ws-16-dvm Are you sure? [y/N] Y This will completely remove the selected VM(s)... whonix-gw-16 sys-whonix test-delete anon-whonix dom0-updatevm whonix-ws-16-dvm Are you sure? [y/N] Y Property 'template' of 'sys-whonix' set to 'dummy'. Property 'template' of 'test-delete' set to 'dummy'. Global property 'updatevm' set to ''. ERROR: The dummy qube does not provide network ``` (No, I didn't create a quote `dummy` at this time. This might be internally used by Qubes tools.) For issue tracking purposes: This is an issue with dom0 `qvm-template` command and not caused by Whonix templates. Background: I intended to document the new `qvm-template` command with it's highly useful `purge` subcommand on https://www.whonix.org/wiki/Qubes/Uninstall

Patrick · February 18, 2022, 6:47pm

github.com/QubesOS/qubes-issues

qvm-template shows confusing error message `ERROR: [Errno 2] No such file or directory: '/etc/qubes-rpc/qubes.TemplateSearch'` if dom0 UpdateVM is set to `none`

opened 06:47PM - 18 Feb 22 UTC

adrelanos

T: bug C: core P: default needs diagnosis

### Qubes OS release R4.1 ### Brief summary Running qvm-template withou…t a Qubes dom0 UpdateVM set shows a confusing error message. ### Steps to reproduce 1. set dom0 update VM to none 2. qvm-template --verbose --enablerepo=qubes-templates-community-testing install whonix-gw-16 whonix-ws-16 ### Expected behavior A useful error message. ### Actual behavior Confusing error message. > ERROR: [Errno 2] No such file or directory: '/etc/qubes-rpc/qubes.TemplateSearch'

Patrick · February 25, 2022, 5:30pm

Qubes-Whonix stable Templates point release. Same as Whonix 16.0.4.2 - for VirtualBox - Point Release!.

qubes-template-whonix-ws-16 4.0.6-202202171443 (r4.1) · Issue #2820 · QubesOS/updates-status · GitHub
qubes-template-whonix-gw-16 4.0.6-202202171443 (r4.1) · Issue #2819 · QubesOS/updates-status · GitHub

Patrick · February 28, 2022, 11:34pm

Patrick · February 28, 2022, 11:48pm

Place for build template commands · Issue #566 · QubesOS/updates-status · GitHub
Place for build template commands · Issue #566 · QubesOS/updates-status · GitHub

Patrick · June 25, 2022, 8:04am

Good news for ticket sys-net phones home to fedoraproject.org for captive portal detection · Issue #1814 · QubesOS/qubes-issues · GitHub - to quote myself:

Seems like this fixed itself.

What’s missing is a Qubes openQA test which shows an error should the package NetworkManager-config-connectivity-fedora get re-introduced into the default installation at some point.

Patrick · June 25, 2022, 8:05am

github.com/QubesOS/qubes-issues

document how to route all traffic over Tor / how to disable Qubes default clearnet traffic

opened 07:58AM - 25 Jun 22 UTC

adrelanos

T: enhancement C: doc privacy P: default

### The problem you're addressing For users that desire advanced anonymity, t…here should be no clearnet traffic while performing activities via Tor that require privacy. This is because when the user's internet connection breaks down (usual internet service provider (ISP) issues, network coverage issues, WiFi issues, hardware issues, power loss, ...) then both all clearnet and Tor connections break down at the same time. A passive advanced adversary could correlate anonymous and non-anonymous connections. An active advanced adversary (such as ISP level) could even briefly on purpose disconnect a few users at a time and thereby narrow down which users would loose a clearnet/Tor connection at the same time. That a user is connected anonymously and non-anonymously to the same server is likely nowadays due to internet centralization with very popular services such as Google Analytics almost everywhere, Cloudflare and Amazon AWS data centers to name a few omnipresent points of centralization. This is also documented here: https://www.whonix.org/wiki/DoNot#Use_Clearnet_and_Tor_at_the_Same_Time ### The solution you'd like User documentation on how to disable all Qubes clearnet default traffic. Let's start with this first before considering automation (such as Qubes salt, some button in a GUI, or what else. ### The value to a user, and who that user might be An advanced anonymity feature defeating some attacks by advanced adversaries. ### related * https://github.com/QubesOS/qubes-issues/issues/1948 ### feature request This is a feature request for Qubes core. The ones who might now best are probably the Qubes developers. Could you please list all the places in which Qubes generates default clearnet traffic? Once known, I could document how to disable these. A few coming to mind: * https://github.com/QubesOS/qubes-issues/issues/1814 * Qubes network time synchronization running in sys-net * What else?

Patrick · June 27, 2022, 2:27pm

Patrick · June 28, 2022, 10:48am

Patrick · June 28, 2022, 10:49am

github.com/QubesOS/updates-status

qubes-template-whonix-ws-16 4.0.6-202206270840 (r4.1)

opened 09:16AM - 27 Jun 22 UTC

closed 01:03PM - 13 Jul 22 UTC

qubesos-bot

r4.1-stable

Template whonix-ws-16 4.0.6-202206270840 for Qubes r4.1, see comments below for …details. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload linux-template-builder 4.0.6-202206270840 r4.1 templates-itl vm-whonix-workstation-16 repo` (available 7 days from now) * `Upload linux-template-builder 4.0.6-202206270840 r4.1 templates-community vm-whonix-workstation-16 repo` (available 7 days from now) Above commands will work only if package in testing repository isn't superseded by newer version.

github.com/QubesOS/updates-status

qubes-template-whonix-gw-16 4.0.6-202206270941 (r4.1)

opened 11:56AM - 27 Jun 22 UTC

closed 01:03PM - 13 Jul 22 UTC

qubesos-bot

r4.1-stable

Template whonix-gw-16 4.0.6-202206270941 for Qubes r4.1, see comments below for …details. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload linux-template-builder 4.0.6-202206270941 r4.1 templates-itl vm-whonix-gateway-16 repo` (available 7 days from now) * `Upload linux-template-builder 4.0.6-202206270941 r4.1 templates-community vm-whonix-gateway-16 repo` (available 7 days from now) Above commands will work only if package in testing repository isn't superseded by newer version.

Patrick · July 11, 2022, 8:34am

Stop telling VMs the exact physical CPU model in the computer · Issue #1142 · QubesOS/qubes-issues · GitHub

Patrick · July 13, 2022, 1:03pm

Now in Qubes stable community templates repository.

Patrick · July 13, 2022, 7:08pm

Stop telling VMs the exact physical CPU model in the computer · Issue #1142 · QubesOS/qubes-issues · GitHub

Patrick · August 30, 2022, 11:29am

Patrick · October 1, 2022, 4:12pm

github.com/QubesOS/qubes-issues

Qubes should keep IP forwarding in VMs with the `provides network` (Net Qube) disabled by default

opened 04:10PM - 01 Oct 22 UTC

closed 07:14PM - 01 Oct 22 UTC

adrelanos

T: bug P: default R: not a bug

### Qubes OS release R4.1 ### Brief summary When a VM is has option `pr…ovides network`, Qubes automatically enables IP forwarding. ### Steps to reproduce Enable `provides network` in QVMM. `cat /proc/sys/net/ipv4/ip_forward` ### Expected behavior `0` - IP forwarding disabled. ### Actual behavior `1` - IP forwarding enabled. ### Rationale Instructions to setup Qubes sys-vpn VMs as well as VPN packages are difficult for users to set up. When following [these Qubes VPN instructions](https://github.com/Qubes-Community/Contents/blob/master/docs/configuration/vpn.md) and simply forgetting to edit `/rw/config/rc.local`, the setup does nothing. The user won't be using the VPN. That would result in a leak, in an unexpected connection over clearnet that was expected to be routed over the VPN. Also `/rw/config/rc.local` does not seem to be a safe mechanism to configure such scripts as networking might be up and functional before any scripts run from `/rw/config/rc.local` (firewall, vpn) have completed. Meanwhile, there could be leaks. To avoid leaks, it would be much safer if IP forwarding was disabled by default. Then how could users use some specific things that require it? In these cases, for example in case of above linked instructions, it would be up the these instructions / the scripts to enable IP forwarding should that be required. That documentation / scripts should do so after the firewall has been load. ### Impact on Qubes-Whonix This is primarily a general Qubes bug report. I.e. unspecific to Whonix. The impact on Whonix is currently very little because Whonix explicitly ships a config that disabled IP forwarding as well as systemcheck checks if IP forwarding is disabled and would show a warning if it was accidentally enabled. However for defense in depth, it would be much better if Qubes would stick with Linux's default, which is to have IP forwarding disabled by default.

Patrick · October 1, 2022, 4:16pm

Patrick · October 17, 2022, 11:46am

github.com/QubesOS/updates-status

qubes-template-whonix-gw-16 4.0.6-202210171036 (r4.1)

opened 10:38AM - 17 Oct 22 UTC

closed 03:27PM - 17 Oct 22 UTC

qubesos-bot

r4.1-testing

Template whonix-gw-16 4.0.6-202210171036 for Qubes r4.1, see comments below for …details. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload linux-template-builder 4.0.6-202210171036 r4.1 templates-itl vm-whonix-gateway-16 repo` (available 7 days from now) * `Upload linux-template-builder 4.0.6-202210171036 r4.1 templates-community vm-whonix-gateway-16 repo` (available 7 days from now) Above commands will work only if package in testing repository isn't superseded by newer version.

github.com/QubesOS/updates-status

qubes-template-whonix-ws-16 4.0.6-202210171036 (r4.1)

opened 11:22AM - 17 Oct 22 UTC

closed 03:27PM - 17 Oct 22 UTC

qubesos-bot

Template whonix-ws-16 4.0.6-202210171036 for Qubes r4.1, see comments below for …details. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload linux-template-builder 4.0.6-202210171036 r4.1 templates-itl vm-whonix-workstation-16 repo` (available 7 days from now) * `Upload linux-template-builder 4.0.6-202210171036 r4.1 templates-community vm-whonix-workstation-16 repo` (available 7 days from now) Above commands will work only if package in testing repository isn't superseded by newer version.